Ethereal-users: Re: [Ethereal-users] negative time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Ron Flory <ron.flory@xxxxxxxxxx>
Date: Wed, 11 Dec 2002 13:31:49 -0600
On Wed, Dec 11, 2002 at 04:29:59PM -0000, Z.Qili@xxxxxxxxxxxxx wrote:

Does anybody know why there are so many negative time values in Ethereal?
It seems impossible for "negative time" because the time is calculated
comparing to the first packet sniffed.


 I've seen this as well (x86 linux, 2.4.x kernels).

 I most often see it when 'display options' is set to 'seconds since
previous frame'.

 I've always attributed it to a strange libpcap issue, but thats just a
wild guess...

ron